Security practices

We design systems with least privilege, encrypted transport (HTTPS), secrets stored in environment variables, and structured logging with PII redaction. Administrative areas are intended to be protected with strong authentication when the product dashboard is enabled.

Vulnerability reports are welcome — email security@nexsusgrowth.com. Include steps to reproduce and impact; we acknowledge reports and coordinate disclosure before any public write-up.